In a World with Threats Around Every Corner - Practical Cybersecurity Architecture and AI Security
security made simple
Featured
Break-Glass Access That Does Not Quietly Become Normal Access
A practical design for emergency access that remains independent, time-bounded, observable, testable, and difficult to normalize into an ordinary administration path.
Security Architecture in an AI and Quantum World: My Conversation with 2GuysTek
A conversation with Rich from 2GuysTek about the Cybersecurity Architect's Handbook, the fundamentals that still matter, and how architects should approach AI, zero trust, quantum readiness, and legacy systems.
Seeing Cybersecurity Architect’s Handbook in the Wild Never Gets Old
Seeing a well-read copy of Cybersecurity Architect’s Handbook, Second Edition out in the wild never gets old.
Practice at Home the Way You Preach at Work
I spend my working hours telling teams how to do security well. Segment the network. Write the change down. Model the threat before you build the control. Then I go home, and if I am honest with myself, the temptation is to cut every one of those corners because it is "just the lab."
Latest
Break-Glass Access That Does Not Quietly Become Normal Access
A practical design for emergency access that remains independent, time-bounded, observable, testable, and difficult to normalize into an ordinary administration path.
Proving Least Privilege with Denial Tests
Least privilege is not proved by showing that approved work succeeds. It is proved by testing the nearby actions, resources, identities, and conditions that policy must deny.
The Architecture Review Must End with a Decision
An architecture review earns its cost only when it produces an explicit decision, bounded conditions, accountable owners, verification criteria, and a durable record.
How to Test Yourself in a Personal Cybersecurity Lab
A practical skills checklist for building a personal VM lab, testing what you know, collecting evidence, and recovering from your own mistakes.
Retiring a Security Platform Without Bringing It Back by Accident
Decommissioning is the controlled removal of authority, dependencies, identities, and startup paths, not a power-off event.
backup
·
A Backup Is Not Recovery Evidence
A completed backup proves data was written somewhere. Recovery evidence proves the right service can be restored safely, within its objective, without colliding with production.
AI Guardrails Are Operating Controls, Not Prompt Instructions
A practical baseline for governing AI authority, data, tools, consequential actions, evidence, and lifecycle risk without mistaking a system prompt for a security boundary.